|
200181
|
5.5 |
MEDIUM
Local
|
apple
|
ipados iphone_os
|
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application installation prompt may display the wrong domain.
|
NVD-CWE-noinfo
|
CVE-2020-29613
|
2024-11-21 14:24 |
2021-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200182
|
7.8 |
HIGH
Local
|
apple
|
mac_os_x macos
|
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious ap…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-29612
|
2024-11-21 14:24 |
2021-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200183
|
7.8 |
HIGH
Local
|
apple
|
ipados watchos tvos iphone_os mac_os_x icloud macos
|
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-29611
|
2024-11-21 14:24 |
2021-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200184
|
5.5 |
MEDIUM
Local
|
apple
|
ipados watchos tvos iphone_os mac_os_x macos
|
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-29610
|
2024-11-21 14:24 |
2021-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200185
|
5.5 |
MEDIUM
Local
|
apple
|
ipados watchos tvos iphone_os mac_os_x macos
|
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.3, macOS Big …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-29608
|
2024-11-21 14:24 |
2021-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200186
|
8.8 |
HIGH
Network
|
getgrav
|
grav_cms
|
The Scheduler in Grav CMS through 1.7.0-rc.17 allows an attacker to execute a system command by tricking an admin into visiting a malicious website (CSRF).
|
CWE-352
Origin Validation Error
|
CVE-2020-29553
|
2024-11-21 14:24 |
2021-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200187
|
5.5 |
MEDIUM
Local
|
getgrav
|
grav_cms
|
The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. (This vulner…
|
CWE-22
Path Traversal
|
CVE-2020-29556
|
2024-11-21 14:24 |
2021-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200188
|
8.1 |
HIGH
Network
|
getgrav
|
grav_cms
|
The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal technique. (This vuln…
|
CWE-22
Path Traversal
|
CVE-2020-29555
|
2024-11-21 14:24 |
2021-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200189
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_applications_control_plus
|
Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.
|
NVD-CWE-noinfo
|
CVE-2020-29658
|
2024-11-21 14:24 |
2021-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200190
|
5.3 |
MEDIUM
Network
|
atlassian
|
data_center jira_server jira_data_center
|
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attacker…
|
CWE-22
Path Traversal
|
CVE-2020-29453
|
2024-11-21 14:24 |
2021-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|